Unless permitted or required by law,
the Health Insurance Portability and Accountability Act (HIPAA)
Privacy Rule prohibits CMS' PCIP program (a HIPAA covered entity)
from disclosing an individual's protected health information
without a valid authorization. In order to be valid, an
authorization must include specified core elements and statements.
CMS will make available to PCIP applicants and enrollees a
standard, valid authorization to enable beneficiaries to request
the disclosure of their protected health information.
The Department of Health
and Human Services (HHS) Centers for Medicare & Medicaid
Services, Center for Consumer Information and Insurance Oversight
is requesting emergency clearance by the Office of Management and
Budget for this new collection package. This new package is being
requested as a result of CMS, in its administration of the PCIP
program, serving as a covered entity under the Health Insurance
Portability and Accountability Act (HIPAA). Without a valid
authorization, the PCIP program is unable to disclose information,
with respect to an applicant or enrollee, about the status of an
application, enrollment, premium billing or claim, to individuals
of the applicant's or enrollee's choosing. This is especially
critical given the population that the PCIP program represents is
comprised of individuals with pre-existing conditions who may be
incapacitated and need an advocate to help them apply or receive
benefits under our plan. CMS is at risk and public harm is
reasonably likely to result if we are not able to begin using a
HIPAA Authorization Form immediately. This risk includes (1) not
being able to provide PCIP applicants and enrollees Authorized
Representatives with information about their eligibility or
enrollment and (2) CMS being determined to be out of compliance
with HIPAA. Due to the urgency and short time frames associated
with this requirement, CMS does not have sufficient time to follow
the normal notice and comment periods associated with the normal
OMB approval process. Therefore, we are requesting an emergency
review and approval for this information collection request.
PL:
Pub.L. 111 - 148 1101 Name of Law: Temporary High Risk Health
Insurance Pool Program
PL: Pub.L. 111 - 148 1101 Name of Law:
temporary high risk health insurance pool program
On behalf of this Federal agency, I certify that
the collection of information encompassed by this request complies
with 5 CFR 1320.9 and the related provisions of 5 CFR
1320.8(b)(3).
The following is a summary of the topics, regarding
the proposed collection of information, that the certification
covers:
(i) Why the information is being collected;
(ii) Use of information;
(iii) Burden estimate;
(iv) Nature of response (voluntary, required for a
benefit, or mandatory);
(v) Nature and extent of confidentiality; and
(vi) Need to display currently valid OMB control
number;
If you are unable to certify compliance with any of
these provisions, identify the item by leaving the box unchecked
and explain the reason in the Supporting Statement.